Privacy Policy

1. Who we are

WinnersVault UK operates ukwinnersvault.com and is the data controller for the personal data described in this policy. You can reach us about anything in it at info@ukwinnersvault.com.

We are a comparison website. We do not offer gambling, do not open accounts and do not hold player funds. That means we hold far less about you than an operator does — but we do process some data, and this policy sets out exactly what.

2. What we collect

Data collected automatically

• Electronic identification data — IP address, approximate location derived from it (usually country or region), device type, operating system, browser and version, screen characteristics, language, referring URL and the pages you view with their timestamps.
• Security and anti-abuse signals — technical characteristics of the request and of the browser environment, together with interaction and timing patterns, used to tell genuine visitors apart from automated traffic and click fraud.
• Campaign data — the advertising campaign, source or keyword that brought you to the site, carried in URL parameters.
• Interaction data — which comparison entries and outbound links you click. Where an operator reports conversions back to us, that data is aggregated and does not identify you to us.

Data you give us

• Correspondence — your email address and the content of your message if you contact us, kept only so we can answer and keep a record of the exchange.

We do not ask for, and have no reason to hold, special category data. We do not knowingly collect data from anyone under 18; if you believe a child has sent us personal data, email us and we will delete it.

3. Why we process it

• To operate the site, deliver pages and keep it secure and available.
• To detect and block bots, scraping, click fraud and other abuse.
• To measure how the site is used and improve its content and structure.
• To measure the effectiveness of our advertising and manage campaign spend.
• To attribute affiliate referrals and reconcile commission with operators.
• To answer your questions and handle corrections and complaints.
• To comply with legal obligations and to establish or defend legal claims.

4. Legal bases

Under the UK GDPR we rely on:

• Legitimate interests (Article 6(1)(f)) — running and securing the site, preventing fraud and abuse, understanding usage in aggregate, and operating our affiliate business. We have considered your interests and rights and consider this processing proportionate and unsurprising.
• Consent (Article 6(1)(a)) — for non-essential cookies and similar technologies, including analytics and advertising. You can withdraw consent at any time via the cookie notice, without affecting processing carried out beforehand.
• Legal obligation (Article 6(1)(c)) — where we must retain or disclose data to comply with the law.

5. Your rights

You have the right to:

• be told what we hold about you and receive a copy (access);
• have inaccurate data corrected (rectification);
• have data deleted where there is no continuing reason to keep it (erasure);
• restrict processing while a dispute about it is resolved;
• receive certain data in a portable, machine-readable form;
• object to processing based on legitimate interests, including any direct marketing;
• withdraw consent at any time where consent is the basis we rely on.

Email info@ukwinnersvault.com to exercise any of these. We respond within one month and do not charge. Because most of what we hold is technical and pseudonymous, we may need extra information from you to locate records relating to you — if we genuinely cannot identify you in our data, we will say so rather than pretend otherwise.

You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office — ico.org.uk, helpline 0303 123 1113. We would appreciate the chance to put things right first.

6. Retention

We keep data only as long as it serves the purpose it was collected for. Server and security logs are kept for a short period, typically weeks rather than months. Aggregated analytics, which no longer identify anyone, may be kept longer for trend analysis. Email correspondence is kept for as long as needed to deal with the matter and any follow-up, and then deleted. Where the law sets a minimum retention period, we follow it.

7. Who we share it with

We do not sell personal data. We share it only with parties who need it to provide the service:

• hosting, content delivery and infrastructure providers;
• analytics providers, such as Google Analytics;
• advertising platforms, such as Google Ads, for campaign measurement;
• affiliate tracking and attribution platforms, which record that a referral came from this site;
• professional advisers, and law enforcement or regulators where we are legally required to disclose.

These providers act as processors under contract, or as independent controllers for their own purposes where their own privacy policies apply.

8. International transfers

Some providers operate outside the United Kingdom. Where data is transferred abroad we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards needed to keep protection equivalent to that available in the UK.

9. Security

The site is served over HTTPS, access to systems is restricted and logged, and we apply appropriate technical and organisational measures to the limited data we hold. No system is perfectly secure, but we hold no payment details, no gambling account credentials and no financial history, which sharply limits what any incident here could expose.

10. Cookies

Cookies and similar technologies are covered separately in our Cookie Policy, including how to control or refuse them.

11. Changes

We update this policy when our processing changes. The version in force is the one published here, with its date at the top of the page.